Full-Time Data Protection/Encryption Engineer II

Encryption Engineer will follow guidance from the data protection - EITS team to work on a defined strategy, following established processes and procedures.

You will work with various internal teams, including Application owners, Application developers, Infrastructure teams, Database Teams, Audit and risk management teams, Regulatory compliance teams, External Key Management software vendors and professional services teams, other security tool Administrators, and business unit customers.

Manage the implementation of data security controls to ensure data protection is maintained following processes and standards set by the global DP team.

Report to the Director of Data Protection.

Encryption Engineer Functions:

• Explain Integration guides and follow the steps to integrate encryption and key management as applicable.
• Work under manager guidance to execute integrations/maintenance of existing integrations.
• Collaborate with the Manager to Identify capability gaps and operational inconsistencies within the Data Protection controls environment and develop a plan to address them through product enhancement, reconfiguration, upgrades, and/or automation of processes.

Encryption Engineer Responsibilities:

• Report progress against Plan weekly.
• Provide inputs to Refresh Data Protection roadmap/s quarterly.
• Ensure Technical and Process documentation is 100% current at all times (all changes thoroughly documented).
• Ensure new builds/integrations/agent implementation follow operational readiness processes, are documented, health/performance KPI's are defined and in place, and monitoring and alerting is in place before promoting to production.
• Follow change governance and guidance from the team (including documented processes).
• Demonstrate continual progress towards obtaining a security-specific certification (or maintaining a current certification).
• Complete two career-related training courses per year.
• Attend lunch and learn sessions.

Requirements:

• 3+ years of experience as a Data Encryption Architect/Engineer/Experience guiding and training development teams on how to encrypt data.
• Experience with AWS KMS, Cloud HSM, Gemalto/ Thales HSM or Key Management.
• Experience working with business teams to understand and document encryption and Key Management strategy.
• Beneficial experience:
• Architecting and implementing encryption strategies on AWS, Azure or Google cloud.
• Working on CMKs and integrating with third-party HSM providers.
• Setting up, managing, and running PKI.
• Automating certificate lifecycle management.

Location: Permanent home-based role in Costa Rica.

Benefits: Medical, life, vision, dental insurance, Asociacion Solidarista, International Share Save Plan, Flex Work/Work from home, Paid time off, Birthday day off, Annual Performance Bonus, Education Reimbursement, Family Bonding, Bereavement Leave, Referral Program, and more.

What is the last date for applying to the job?

Which countries are accepted for this remote job?